This privacy statement applies to the processing of personal data of customers who place an order or visit the Sultan Indian platform. The data controller for processing these personal data is GmbH (“sultanindian.ch”). Sultanindian.ch takes your privacy seriously and therefore adheres to the requirements of the General Data Protection Regulation (GDPR) when processing personal data.
What personal data we process and why
Sultanindian.ch processes your personal data because you use our services. We use the following personal data for the following purposes.
- Ordering Process
We process the personal data you provide to us when you place your order. These personal data are needed to execute your order, confirm your order, and to assess your order, payment, and a possible refund. The legal basis for this processing of personal data is that it is needed for the performance of a contract as defined in the GDPR. We process the following personal data in the ordering process:
- Address details
- Contact details
- Order data
- Payment details
- Comments (if applicable)
- Restaurant Reviews
Aside from the above processing operations, we process personal data you provide when submitting a restaurant review. The legal basis for this processing of personal data is that you have consented to it (by posting a restaurant review) as defined in the GDPR. You can withdraw your consent by contacting us on firstname.lastname@example.org. We process the following personal data when you post a restaurant review:
- Name (if submitted)
- Review, including comments (if submitted)
- Customer Services
When you contact our customer services department, we will use the personal data you provide to answer your question or handle your complaint. The legal basis for this processing of personal data is that it is needed for the performance of a contract as defined in the GDPR. We process the following personal data for customer service purposes:
- Address details (if applicable)
- Contact details
- Order date
- Payment details (if applicable)
- Comments (if applicable)
- Customer satisfaction surveys
To make sure that our services are aligned with your preferences, any personal data you provide to our customer services department may be used for things such as customer satisfaction surveys. The legal basis for this processing operation is that it is needed in pursuing a legitimate interest of sultanindian.ch (customer satisfaction) as defined in the GDPR. This concerns the same personal data as listed under no. 2.
- Fraud prevention
We process some of the above personal data also to prevent fraud and other forms of misuse. The legal basis for this processing operation is that it is needed in pursuing a legitimate interest of sultanindian.ch (fraud prevention) as defined in the GDPR.
We also use your personal data to be able to meet our reporting obligations towards advertisers and stakeholders and to be able to improve our website and our range of products and services. The legal basis for this processing operation is that it is needed in pursuing a legitimate interest of sultanindian.ch (analysis & reporting) as defined in the GDPR. We will always make sure the reports do not contain any data that can be traced back to you.
Our website is neither intended for persons aged under 16, and nor do we intend to collect personal data of website visitors who are aged under 16. However, we are unable to verify visitors’ age. We therefore advise parents to monitor their children’s online activities, so as to prevent their personal data being collected without parental consent. If you feel that we have collected personal data of a minor without consent, please contact us on email@example.com . We will then proceed to erase these data.
How long we store personal data for
sultanindian.ch will not store your personal data for longer than is strictly necessary for the purposes for which your personal data were collected. We will only store your personal data for longer if we are required by law to do so. sultanindian.ch erases most of your personal data 2 years after you place your order. We use this 2-year term for administrative purposes and to be able to deal with possible questions and complaints about your order, either from you or from restaurants. We store personal data that we use for reporting, analytical, and misuse prevention purposes for up to 20 years after you place your order. We are unable to remove your personal data from backups. But when performing a restore from a backup, we will erase the personal data right away.
Sharing with others (not being restaurants)
sultanindian.ch will not sell your personal data to third parties, and we will only disclose them to third parties if necessary for the performance of our contract with you, for analytical, or to comply with legal obligations.
Your personal data may be shared with the following parties:
- Third parties who undertake various activities to support our services. This includes offshore customer support agents, website and application support and hosting providers, eCRM partners like Salesforce who manage our emails and push notifications, companies who deliver your Order to you- any of these third parties might be inside or outside your country of residence.
- Any law enforcement or regulatory body, government agency, court or other third party where we believe disclosure is necessary under applicable law or regulations.
- New owners or re-organized entities in the event of a business restructuring, sale, purchase or joint venture affecting our business.
- Software providers.
- Implementation partners.
- Any other person provided that you have given your consent.
Personal data access, rectification, and erasure
You have the right to access all personal data we collect about you, as well as to request that we rectify or erase your personal data. If you feel that we are processing your personal data without a valid legal basis or that we are processing personal data that are not relevant for our selection process, please contact us. You can contact firstname.lastname@example.org. sultanindian.ch will respond to your request as soon as possible, and in any case no later than four weeks after receiving your request.
Tips, questions, and complaints
Just Eat Takeaway.com takes personal data protection very seriously and we therefore take appropriate measures to protect your personal data against misuse, loss, unauthorized access, unwanted disclosure, and unauthorized alteration. If you feel that your personal data are not adequately protected or there are indications of misuse, please contact us on: email@example.com.
Data Protection Authority
Besides the option of lodging a complaint with us, you have the right to lodge a complaint with the relevant supervisory authority for the protection of personal data. To do so, contact the supervisory authority directly.
Updates to this Statement
We may update this privacy statement from time to time in response to changing legal, technical or business developments and will inform you via the platform.